Misc updates

This commit is contained in:
Kurt Zeilenga 2006-12-07 21:50:15 +00:00
parent a95f6581ca
commit 8744a3ed7a
5 changed files with 47 additions and 38 deletions

View file

@ -10,11 +10,12 @@ fits in with the rest of the world.
H2: Local Directory Service
In this configuration, you run a {{slapd}} which provides directory
service for your local domain only. It does not interact with other
directory servers in any way. This configuration is shown in Figure 3.1.
In this configuration, you run a {{slapd}}(8) instance which provides
directory service for your local domain only. It does not interact
with other directory servers in any way. This configuration is shown
in Figure 3.1.
!import "config_local.gif"; align="center"; title="Local service via slapd configuration"
!import "config_local.gif"; align="center"; title="Local service via slapd(8) configuration"
FT[align="Center"] Figure 3.1: Local service configuration.
Use this configuration if you are just starting out (it's the one the
@ -25,11 +26,12 @@ It's easy to upgrade to another configuration later if you want.
H2: Local Directory Service with Referrals
In this configuration, you run a slapd which provides directory service
for your local domain and configure it to return referrals to a
{{superior}} service capable of handling requests outside your local domain.
You may run this service yourself or use one provided to you.
This configuration is shown in Figure 3.2.
In this configuration, you run a {{slapd}}(8) instance which provides
directory service for your local domain and configure it to return
referrals to a {{superior}} service capable of handling requests
outside your local domain. You may run this service yourself or
use one provided to you. This configuration is shown in Figure
3.2.
!import "config_ref.gif"; align="center"; title="Local service with referrals"
FT[align="Center"] Figure 3.2: Local service with referrals
@ -40,16 +42,16 @@ participate in the Global Directory.
H2: Replicated Directory Service
The slurpd daemon is used to propagate changes from a master slapd
to one or more slave slapds. An example master-slave configuration
is shown in figure 3.3.
The {{slurpd}}(8) daemon is used to propagate changes from a master
{{slapd}}(8) instance to one or more slave {{slapd}}(8) instances.
An example master-slave configuration is shown in figure 3.3.
!import "config_repl.gif"; align="center"; title="Replicated Directory Services"
FT[align="Center"] Figure 3.3: Replicated Directory Services
This configuration can be used in conjunction with either of the first
two configurations in situations where a single slapd does not
provide the required reliability or availability.
two configurations in situations where a single {{slapd}}(8) instance
does not provide the required reliability or availability.
H2: Distributed Local Directory Service

View file

@ -7,7 +7,7 @@ H1: Database Creation and Maintenance Tools
This section tells you how to create a slapd database from scratch,
and how to do trouble shooting if you run into problems. There are
two ways to create a database. First, you can create the database
on-line using LDAP. With this method, you simply start up slapd
on-line using {{TERM:LDAP}}. With this method, you simply start up slapd
and add entries using the LDAP client of your choice. This method
is fine for relatively small databases (a few hundred or thousand
entries, depending on your requirements). This method works for

View file

@ -3,14 +3,16 @@
# COPYING RESTRICTIONS APPLY, see COPYRIGHT.
H1: Introduction to OpenLDAP Directory Services
This document describes how to build, configure, and operate OpenLDAP
software to provide directory services. This includes details on
how to configure and run the stand-alone {{TERM:LDAP}} daemon,
{{slapd}}(8) and the stand-alone LDAP update replication daemon,
{{slurpd}}(8). It is intended for newcomers and experienced
administrators alike. This section provides a basic introduction
to directory services and, in particular, the directory services
provided by {{slapd}}(8).
This document describes how to build, configure, and operate
{{PRD:OpenLDAP}} Software to provide directory services. This
includes details on how to configure and run the stand-alone
{{TERM:LDAP}} daemon, {{slapd}}(8) and the stand-alone LDAP update
replication daemon, {{slurpd}}(8). It is intended for new and
experienced administrators alike. This section provides a basic
introduction to directory services and, in particular, the directory
services provided by {{slapd}}(8). This introduction is only
intended to provide enough information so one might get started
learning about {{TERM:LDAP}}, {{TERM:X.500}}, and directory services.
H2: What is a directory service?
@ -49,7 +51,7 @@ provide the directory service. Typically a global service defines
a uniform {{namespace}} which gives the same view of the data no
matter where you are in relation to the data itself.
A web directory, such as provided by the Open Directory Project
A web directory, such as provided by the {{Open Directory Project}}
<{{URL:http://dmoz.org}}>, is a good example of a directory service.
These services catalog web pages and are specifically designed to
support browsing and searching.
@ -70,8 +72,7 @@ services. LDAP is an {{ORG:IETF}} Standard Track protocol and is
specified as detailed in "Lightweight Directory Access Protocol
(LDAP) Technical Specification Road Map" {{REF:RFC4510}}.
This section gives an overview of LDAP from a
user's perspective.
This section gives an overview of LDAP from a user's perspective.
{{What kind of information can be stored in the directory?}} The
LDAP information model is based on {{entries}}. An entry is a
@ -121,8 +122,8 @@ the entry itself (called the {{TERM[expand]RDN}} or RDN) and
concatenating the names of its ancestor entries. For example, the
entry for Barbara Jensen in the Internet naming example above has
an RDN of {{EX:uid=babs}} and a DN of
{{EX:uid=babs,ou=People,dc=example,dc=com}}. The full DN format
is described in {{REF:RFC4514}}, "LDAP: String Representation of
{{EX:uid=babs,ou=People,dc=example,dc=com}}. The full DN format is
described in {{REF:RFC4514}}, "LDAP: String Representation of
Distinguished Names."
{{How is the information accessed?}} LDAP defines operations for
@ -286,7 +287,7 @@ well-defined {{TERM:C}} {{TERM:API}}, you can write your own
customized modules which extend {{slapd}} in numerous ways. Also,
a number of {{programmable database}} modules are provided. These
allow you to expose external data sources to {{slapd}} using popular
programming languages ({{PRD:Perl}}, {{shell}}, {{SQL}}, and
programming languages ({{PRD:Perl}}, {{shell}}, {{TERM:SQL}}, and
{{PRD:TCL}}).
{{B:Threads}}: {{slapd}} is threaded for high performance. A single
@ -312,7 +313,7 @@ reasonable defaults, making your job much easier.
H2: What is slurpd and what can it do?
{{slurpd}}(8) is a daemon that, with {{slapd}} help, provides
{{slurpd}}(8) is a daemon that, with {{slapd}}(8) help, provides
replicated service. It is responsible for distributing changes
made to the master {{slapd}} database out to the various {{slapd}}
replicas. It frees {{slapd}} from having to worry that some replicas

View file

@ -31,7 +31,7 @@ operating {{TERM:LDAP}}-based directory software.
This document is meant to be used in conjunction with other OpenLDAP
information resources provided with the software package and on
the project's extensive site ({{URL:http://www.OpenLDAP.org/}}) on
the World Wide Web. The site makes available a number of resources.
the {{TERM[expand]WWW}}. The site makes available a number of resources.
!block table; align=Center; coltags="N,URL"; \
title="OpenLDAP Resources"
@ -58,15 +58,16 @@ U-Mich LDAP document: {{The SLAPD and SLURPD Administrators Guide}}.
P2[notoc] Amendments
Suggested enhancements and corrections to this document should
be submitted using the {{PRD:OpenLDAP}}
{{{{TERM[expand]ITS}}}} ({{URL: http://www.openldap.org/its/}}).
Suggested enhancements and corrections to this document should be
submitted using the {{PRD:OpenLDAP}} {{TERM[expand]ITS}}
({{URL: http://www.openldap.org/its/}}).
P2[notoc] About this document
This document was produced using the {{Simple Document Format}}
({{URL:http://search.cpan.org/src/IANC/sdf-2.001/doc/}}) documentation
system developed by {{Ian Clatworthy}}. Tools for {{SDF}} are
available from CPAN ({{URL:http://search.cpan.org/search?query=SDF}}).
This document was produced using the {{TERM[expand]SDF}} (SDF)
documentation system
({{URL:http://search.cpan.org/src/IANC/sdf-2.001/doc/}}) developed
by {{Ian Clatworthy}}. Tools for SDF are available from {{ORG:CPAN}}
({{URL:http://search.cpan.org/search?query=SDF}}).

View file

@ -103,6 +103,7 @@ Name|Long|Jump
ANSI|American National Standards Institute|http://www.ansi.org/
BSI|British Standards Institute|http://www.bsa-global.com/
Cyrus|Project Cyrus|http://cyrusimap.web.cmu.edu/
CPAN|Comprehensive Perl Archive Network|http://cpan.org/
FSF|Free Software Foundation|http://www.fsf.org/
GNU|GNU Not Unix Project|http://www.gnu.org/
IAB|Internet Architecture Board|http://www.iab.org/
@ -132,6 +133,9 @@ GDBM|http://www.gnu.org/software/gdbm/
Heimdal|http://www.pdc.kth.se/heimdal/
MIT Kerberos|http://web.mit.edu/kerberos/www/
OpenLDAP|http://www.openldap.org/
OpenLDAP FAQ|http://www.openldap.org/faq/
OpenLDAP ITS|http://www.openldap.org/its/
OpenLDAP Software|http://www.openldap.org/software/
OpenSSL|http://www.openssl.org/
Perl|http://www.perl.org/
TCL|http://www.tcl.tk/
@ -250,6 +254,7 @@ SRP|Secure Remote Password
SSF|Security Strength Factor
SSL|Secure Socket Layer
STD|Internet Standard
SQL|Structured Query Language
TCP|Transmission Control Protocol
TLS|Transport Layer Security
UCS|Universal Multiple-Octet Coded Character Set